Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
13/06/2024, 02:57
Static task
static1
Behavioral task
behavioral1
Sample
a39a8c720702ee30fc645fc882c788d2_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a39a8c720702ee30fc645fc882c788d2_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
a39a8c720702ee30fc645fc882c788d2_JaffaCakes118.html
-
Size
1KB
-
MD5
a39a8c720702ee30fc645fc882c788d2
-
SHA1
af0e5462dc73af18fc9bf0cde2c3de3c85aa9be7
-
SHA256
dd533c06ae2eb8f2132c00769283f436b161a4f9c8ebf186ca6ede7d23d948d6
-
SHA512
46d34ae68f0c7f89d9c88c92a19b7110b38bd9093257c2368f7490c9c69dc6cceff10b5bc3552b72f1288bf01e87d34ab17be67ed78b6f1b501a8923d1472088
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424409337" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B7F2EA71-2930-11EF-85B9-4A8427BA3DB8} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a77bc11c96bc624caa13c5b723162be200000000020000000000106600000001000020000000f16d3f5f83423dc37e8c7f149cb2c52545edbc2516a41149aff3e40254b3b91c000000000e8000000002000020000000485ef069785f27d783077e15c345a4f8b39e7d38d0c8332c0eb5ad445ee64d3f20000000e74016c79e058a469442a0075427d6ed2553ab3b18f2e4a7a7b5742821bcf34540000000152706c429ca6290fb53ed2544cb56a16d5bfd51b778378c7be1e53eb0d5d5fa09a0e0afda90d00a25a903617911dc66e173765f805813ac0295b88c5b7e029b iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 906a6a8c3dbdda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2356 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2356 iexplore.exe 2356 iexplore.exe 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2356 wrote to memory of 2396 2356 iexplore.exe 28 PID 2356 wrote to memory of 2396 2356 iexplore.exe 28 PID 2356 wrote to memory of 2396 2356 iexplore.exe 28 PID 2356 wrote to memory of 2396 2356 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a39a8c720702ee30fc645fc882c788d2_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2356 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2356 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2396
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55d07f9dc32e12884ebcecc0ae429bedc
SHA11ca7dcecf775093ebf91eb7af30dd8e918a83e38
SHA25665d2085d1583286d90c10c4c06482a74ebe977a75f48382e2f55d6325b0a9f88
SHA512d4754147f14ff4a4448af2657d73185bf5241066bcea8b759d25e806af1173af2d24ef5d372313377fc55cfd37552698ce2d434c7c5481b28cf5cfec1c010bb6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD530cac74390de479637718ea5cd5dbe5e
SHA1b087b83741c5836bb7df13e6817ca7a9ad1dbe9f
SHA256fa675b624bad36b29d83334e3c7365c901ef2cc0202c23ffd68302f4923217bf
SHA5120a3c3c26bf63cde5983afd35f59179ad2d9c92afcb9dbeb2f3f7b81c8682654e1a0b6dd41563575315d53b03fc81abaa7c5b4a87cf573a633ce6a06845b60438
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b2e303b3620b16a398dac4c15fa1fbd4
SHA1dbdecb625bd1d682c25b961384c8ff3eba6ddeed
SHA25620f4b01bf17f879b5403edc5498e00f883097cc08709288ac3231730419f851c
SHA512fc55deaeef44076a2200621ea777fb7b7b48db6cff4284349989b14bf9382643c8ccf51923bc8c4f7fae859005d7b3d2302b35f3a9e220a982f68c68e35d665e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58fb3315663af932a35ce0b5d96c1f6ea
SHA1f2d83ac74c6279caba4223979d73ed56afb01029
SHA256979ed57f69be9046c1ea58b10b99fc53e8133a1409371e32faf903ec05e43443
SHA512bb49e148009b09f65ff6f0c022a21c94f5e1c093b86d02048f05b0d6b2ef491af65b92b0d9c8c1addd5d2f64885b5ff9dd6b563f4dd90b21f750b3e198f99570
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD583c265089783b4aaf35685fb22d24cc2
SHA137faa743a75df721b1286c86ef0f80dc22544d0e
SHA256e4f775e5a174e6bcc3ce7848a27c227697a5b4d685429cab33d3013698db106d
SHA5126406423f976be7c450732be2fc52b3bbbf72f283b74d24faccf2da7c86495fbd52a8ffb32a5ba0a58948c2a64aac74dca515ed453a49bcb8b3f7f72075f082df
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c9e7d5b2d444b6ab7672758c3bee40ed
SHA12f75c32ef02725670317e681292e9e93b8cd2ee8
SHA2563cbcd7783e9053dbcba7de01228b7040e1844333819edbe7a5fb4e9d6ef902bc
SHA512001333dce163be49dd380462636f6f219d72879678ca0db0a6986272b8923c38480e7446a9ebf2eaed198d5729eb8d46db325c905723f9dd619dc19ce439092f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD502b29cc50f9e8428d6230335a89b469e
SHA16019d10e258048e704adfe4f62d06596ee087b2a
SHA256c29599c285d12e74b9da12302e376451a66bdf0a80646c272d8c617604852e74
SHA512067a7bf9e8d6bc9457f1000790687823783f04c31c3dd7447631e5706b0bc87b40dcf2dd41439e0fa35e790c915622845eaf0e588b352abf5acb9b377172a4cb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD545064aa71533c993e5c39beb1226732a
SHA1b2cf4aacb13e0e2984aae6b1e7d0b32d222ce0f1
SHA2561988137cf8e21ab56032a0d50ddb65c0e33e77a70509c390f8e20f70e74c9111
SHA5126d74268b23e134f0ea1b802376d96e39feb879a792f469b787b20f7692fbb0ec6ce2b9de53248923181a493d596361c639c389e3d06f271251e5c7b594a102c7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ac7fac9a993b22e7cb174a7dc903867d
SHA1deafc77521bdd31ce4cb0ecbd4ef937eeaf9543e
SHA25630030bf5bc6666bc640a5013c8c17cbc7c25c1d30f557a9b073272025bb67660
SHA512680835fc9640863089637741b378cda5955403cdabcda4e66250cadb8272c705b7c2caeb7cc11ebd25241b456a6c0d29ffb413307284d0e3739e8d6fb06f2e41
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f42cc72f3c5afb18168c2e9f3c5b814f
SHA1ea22e538234b0af3b3701bc520f0edcd09906ce7
SHA256ed8ffdc25d4b549b92c7470404c6c4e2c7bd1a6c717e0e636e892c6c649f0996
SHA512f43ebc028a7519a4b264843fec084038787039bb19d59e63566e6e82379bf7296c198f5559008931ba708925ad77888241622bf4972b994887f24205a632af43
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ed6a25cacc130022aa5170b7c015a810
SHA1b93f066dce27e2ad5885c7096a9c39df432ae2c1
SHA256d9d90ecccde2d93d12af5573413d1968d70146d3a3bf63279c515220488d2a9e
SHA5121a08d639456fe49e45895c7492c7771e6a6e476eaa4ff068eac4740f1ca71e0fe069bf16ffb4a5229377bce31577bfe8ca4f54405a659ba8c6b297d9c271886a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5801d4a85f0ed499a95479db7aeaf9aea
SHA1dec7a0b62c98be3db565513f47c08423fddfe799
SHA25622ce1c74d1eb53dd48c7702852c5b1cc8f847c5f9e03de32bee19b729f6f8c06
SHA512c28e361839c73c16ba485e59c4b8862fd5649dfb9e7b2692c7c54796224043e20d9984de84d837885033a580b3358a4cbebb87cd558594d897aba27681c200b5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e419317d821f39a7a38de4a7fa95d893
SHA11ce8a5eafadb8bf87d56ecfd374e65c386728b67
SHA25621c22f1db5e14564e259f45b6bc9affe8800c92a0f869d8d8a8ccd59c40bb82f
SHA512c0a5fd22346abc89625d8f50ad693fb9952796ed19d431f7fce2032fbf4df8046e67ee45bcfa502caa99b2718c6cdcee84329121f3448a04a8bb66423a94911d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aff290d0542d6290991225dc628194bf
SHA1a1e487bdb91d2238c55aff2b9e675b4dcd14a889
SHA256d0ff4052f3fa694aa9fc934c62265cf02debc2245488bc6dd3b3c374bcc967f3
SHA512875c997a860e3b89fb336d5fe47494a14270d0e4ce52eae17e00248d8124e3e3b2f8fd3f3b34a2b5703ce75a7f0e1678811c536a6ad9fe2037e7bfc6ce697210
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56efc5373f165830620a21c3151818e5c
SHA190916050e1277585a7fd9514aee9a73e29409cea
SHA25696820b84a369ad220bb50633f115bcdd2826b465996912bbc27a3229606dc501
SHA5124a460295ed22c1378f34f68091c430accd65581459b79eccb3240605142d2b08be2dac92f6bda4ef751c28f237de94afcc9c267a4c15f3454a86cfb6b168cdfa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f56064a940fa5ccd5704e2de8fc83db6
SHA17acf6b57414fb3d905fc334a4418425178b1c4d1
SHA2561ee0d1b3e7bcfdb50c9c37d98843bf1278ca957cd121394b795800ca7c049c0a
SHA51289010aee81b83b1ab1b83a79b1532c6cb3db0b5dda1df648da65306673963c63c311a9af2484cb1d7c7fd6a4088daec424c3e1ba56d37df95d8b32292f1485f8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cb208bfb8ba65f0816216e95f23e5b2c
SHA175a143e00635332b6a4948476be034cb0d1be015
SHA2560cd35bd470b1e8d977ad602387b33f45b14d9969af3c09e823364ff76a7ff420
SHA512ea5ad9e8288abbc03693869ba183aa66516f2452b845c52110738eaaa4ff1147308c01d930a2db0f593abebac686326b0b1902b4ec97e9eed6d9dd6b24ecd1e2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59e5572ba9887645367e4edef8957516b
SHA1fe3d55ea410257468763bc57e87472a4c14f2aa0
SHA256ee4a8c68c6f69eb8893ca059aafab8c28f0142fae039527d203754fe6ba49769
SHA51210b20f5be0dddf70795d18500d5f9307d3cb10aacc776c37cfd6124c2efca321870bcec92b6ecb7e9085c69a2b1d7e575a90a64c856f60395cabd58f52d633f0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e8a965815ba888a2d274f6bc2bae4623
SHA146ddf48a1bc5b1e72e64738520c617b246dd365b
SHA256d8cb9ea990b347dd2811ab2eb4e577af9527c60464949ba120cea706a84a1f52
SHA512a880b63eeb1555e5244e2cce2245fe9971ac5add84c478ae1bf36ddd42b781117e6f787a4822ed140c407337561b6d7cbb1ea2d8ff4045d755ecf63a4055c904
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b